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In the claims : 

Please substd^tute the following full listing of 
claims for the cl/aims as originally filed or most 
recently amended. 



1. (Currently Amended) A method of operating a data 
\^processing system to control user access to a plurality 
of resources, said method including the steps of 
\^ editing a list of resources, 

^diting a list of profiles, each said profile 
contairii4ng a designation of at least one of said 
resourced, and 

editing a list of users to add or delete a profile 
containing said desicrnation of said at least one said 
resource for a\user, said list of users including, for 
each listed usery a userlD by which the user can be 
authenticated forx^ne or more profiles . 




2. (Original) A method as recited in claim 1, wherein 
all of said editing steps are performed under 
supervision of an administrator to the exclusion of 
users . 



3. (Original) A method as recis^ed in claim 1, 
including the further step of 

authorizing access of each us'ter to selected 
resources included in said resourceNList in accordance 
with contents of profiles in said list! of profiles 
which are associated with each user in \aid list of 
users . 



4. (Original) . A method as recited in claim wherein 
said authorizing step is performed upon detectsjon of a 
said editing step. 
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5. (Qxiginal) A method as recited in claim 4, wherein 
said oetection is performed by comparison of said lists 
of users, profiles and resources with prior lists of 
users, profiles and resources. 

6. (Original) A method as recited in claim 3, 
including tke further steps of 

authentoNcating a user in accordance with said 
userlD, and \ 

providing Recess to a resource, authorized by said 
authorizing step\ which is selected by said user 
authenticated in said authenticating step, 

7. (Original) A method as recited in claim 4, 
including the furtherX steps of 

authenticating a Vser in accordance with said 
userlD, and \ 

providing access to\a resource, authorized by said 
authorizing step, which isv selected by said user 
authenticated in said authenticating step. 

8. (Original) A method as reccited in claim 5, 
including the further steps of\ 

authenticating a user in accordance with said 
userlD, and \ 

providing access to a resourc^, authorized by said 
authorizing step, which is selectedXby said user 
authenticated in said authenticating \step , 

9. (Original) A method as recited in c^aim 2, 
including the further step of \ 

authorizing access of each user to selected 
resources included in said resource list ik accordance 
with contents of profiles in said list of pirafiles 
which are associated with each user in said list of 
users . \ 
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10. (Original) A method as recited in claim 9, wherein 
Siaid authorizing step is performed upon detection of an 
editing step. 

11 . \(Original) A method as recited in claim 10, wherein 
detection of an editing step is performed by comparison 
of sard lists of users, profiles and resources with 
prior l\sts of users, profiles and resources. 

12. (OrigiSnal) A method as recited in claim 9, 
including tVe further steps of 

authent\cating a user in accordance with said 
userlD, and \ 

providing Recess to a resource, authorized by said 
authorizing step\ which is selected by said user 
authenticated in Ssaid authenticating step. 

13. (Original) A metfiod as recited in claim 10, 
including the further Nsteps of 

authenticating a ixfeer in accordance with said 
user ID, and \ 

providing access to av resource, authorized by said 
authorizing step, which is ^selected by said user 
authenticated in said authenoJ-cat ing step. 

14. (Original) A method as recrted in claim 11, 
including the further steps of \ 

authenticating a user in accordance with said 
userlD, and \ 

providing access to a resource ,\ authorized by said 
authorizing step, which is selected by said user 
authenticated in said authenticating sfiep . 




• 
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15. (Original) A method as recited in claim 1, 
including the further step of 

\ deleting a resource from all profiles specifying a 
resource to be deleted from said resource list during 
saidL step of editing said list of resources. 

16. (Original) A method as recited in claim 1, 
including the further step of 

delating a profile from all users in said list of 
users forXwhich a profile to be deleted from said 
profile lis^ is specified during said step of editing 
said list ors. prof iles . 

17. ( Current 1 A AiT^erid:^d) A data processing system 
having a plurality of available resources, said system 
including \ 

a server, \ 

means for controlling access to said resources, 
said means for conti^plling access to said resources 
including a list of s^id resources, a list of profiles, 
each profile corresponding to at least one sc said 
resource, and a list oA users containing information 
for authenticating a useV and at least one profile 
corresponding each to saici user, said at least one 
profile corresponding to said at least one resource, 
and \ 

means for providing communication between a user 
and said server. \ 

18. (Original) A system as recitW in claim 17, further 
including \ 

means for editing any of saidvList of users, said 
list of profiles and said list of reysources. 
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19. (Original) A system as recited in claim 18, further 
including 

means for detecting editing of any of said list of 
sers, said list of profiles and said list of 
r^ources . 

20 . \( Original) A system as recited in claim 17, furtheir 
including 

rnteans for authorizing user access to selected ones 
of saidXresources in accordance with said profiles in 
said lists^ of profiles and said users in said list of 
users . 

21. (Original) A system as recited in claim 19, further 
including 

means foA authorizing user access to selected ones 
of said resources in accordance with said profiles in 
said list of prosfiles and said users in said list of 
users responsive Vo said means for detecting editing. 

22. (Original) A system as recited in claim 17, further 
including 

means for authenticating a user upon access by 
said user to said server, 

23. (Original) A system a^^s recited in claim 22, further 
including 

means for directing a \user authenticated by said 
means for authenticating a user to a resource to which 
access of that user has been N^uthori zed by said 
authorizing means . 



24. (Original) A system as recite 
said means for directing is resp« 
path data contained in said list 



d in claim 23, wherein 
^nsive to location or 
of resources . 
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2v5. (Original) A system as recited in claim 24, wherein 
sa^d path or address data is a URL, 

26. \original) A system as recited in claim 17, further 
including 

me^ns for deleting a resource from all profiles 
specifying a resource to be deleted from said resource 
list. \ 

27. (Origina^) A system as recited in claim 17, further 
including \ 

means for\deleting a profile from all users in 
said list of useVs for which a profile to be deleted 
from said profileXlist is specified. 

28. Currently Amended) A computer readable medium 
containing code for operating a data processing system 
to control user accessXto a plurality of resources, 
said code implementing Vhe steps of 

editing a list of resources, 

editing a list of profiles, each said profile 
containing a designation orv at least one of said 
resources, and \ 

editing a list of users Vo add or delete a profile 
containinQ said designation ofXsaid at least one said 
resource for a user, said list ©f users including, for 
each listed user, a userlD by whYch the user can be 
authenticated for one or more proi^iles . 

29. (Original) A computer readable medium as recited in 
claim 28, wherein said code requiresXall of said 
editing steps to be performed under siJtoervision of an 
administrator to the exclusion of usersv. 
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BO. (Original) A computer readable medium as recited in 
Alaim 28, further including code for implementing a 
siep of 

\ authorizing access of each user to selected 
resources included in said resource list in accordance 
with contents of profiles in said list of profiles 
which are associated with each user in said list of 
users\ 

31. (OraSginal) A computer readable medium as recited in 
claim 30 \ wherein a code section implementing said 
authorizing step is executed upon detection of a said 
editing steb. 

32. (OriginalX A computer readable medium as recited in 
claim 31, wherWn a code section performing said 
detection compaises said lists of users, profiles and 
resources with prd.or lists of users, profiles and 
resources . \ 

33. (Original) A comVuter readable medium as recited in 
claim 30, further incJSuding code for implementing the 
steps of \ 

authenticating a us^r in accordance with said 
userlD, and \ 

providing access to a\resource, authorized by said 
authorizing step, which is selected by said user 
authenticated in said authent\ eating step. 

34. (Original) A computer readaple medium as recited in 
claim 33, wherein said code implementing said detection 
of an editing step compares said rists of users, 
profiles and resources with prior l\sts of users, 
profiles and resources. \ 
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^5. (Original) A computer readable medium as recited in 
cJssaim 34, further including code implementing the 
further steps of 

\authenticating a user in accordance with said 
userllA and 

providing access to a resource, authorized by said 
authorizi>ng step, which is selected by said user 
authenticated in said authenticating step. 

36. (OriginalrvA computer readable medium as recited in 
claim 28, further including code for implementing a 
step of \ 

deleting a resburce from all profiles specifying a 
resource to be deleted from said resource list during 
said step of editing s^id list of resources. 

37. (Original) A computeA readable medium as recited in 
claim 28, further includiira code for implementing a 
step of \ 

deleting a profile from^ll users in said list of 
users for which a profile to bs^ deleted from said 
profile list is specified durings. said step of editing 
said list of profiles. \ 



